CVE-2015-7852

EPSS 12.28%
Veröffentlicht 07.08.2017 20:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 12

NVD 46 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ntp ≫ Ntp Version >= 4.2.0 < 4.2.8

Ntp ≫ Ntp Version >= 4.3.0 < 4.3.77

Ntp ≫ Ntp Version 4.2.8 Update -

Ntp ≫ Ntp Version 4.2.8 Update p1

Ntp ≫ Ntp Version 4.2.8 Update p1-beta1

Ntp ≫ Ntp Version 4.2.8 Update p1-beta2

Ntp ≫ Ntp Version 4.2.8 Update p1-beta3

Ntp ≫ Ntp Version 4.2.8 Update p1-beta4

Ntp ≫ Ntp Version 4.2.8 Update p1-beta5

Ntp ≫ Ntp Version 4.2.8 Update p1-rc1

Ntp ≫ Ntp Version 4.2.8 Update p1-rc2

Ntp ≫ Ntp Version 4.2.8 Update p2

Ntp ≫ Ntp Version 4.2.8 Update p2-rc1

Ntp ≫ Ntp Version 4.2.8 Update p2-rc2

Ntp ≫ Ntp Version 4.2.8 Update p2-rc3

Ntp ≫ Ntp Version 4.2.8 Update p3

Ntp ≫ Ntp Version 4.2.8 Update p3-rc1

Ntp ≫ Ntp Version 4.2.8 Update p3-rc2

Ntp ≫ Ntp Version 4.2.8 Update p3-rc3

Debian ≫ Debian Linux Version 7.0

Debian ≫ Debian Linux Version 8.0

Debian ≫ Debian Linux Version 9.0

Netapp ≫ Oncommand Balance Version -

Netapp ≫ Oncommand Performance Manager Version -

Netapp ≫ Oncommand Unified Manager Version - SwPlatform clustered_data_ontap

Netapp ≫ Clustered Data Ontap Version -

Netapp ≫ Data Ontap Version - SwPlatform 7-mode

Oracle ≫ Linux Version 6 Update -

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Aus Version 7.3

Redhat ≫ Enterprise Linux Server Aus Version 7.4

Redhat ≫ Enterprise Linux Server Aus Version 7.6

Redhat ≫ Enterprise Linux Server Aus Version 7.7

Redhat ≫ Enterprise Linux Server Eus Version 7.3

Redhat ≫ Enterprise Linux Server Eus Version 7.4

Redhat ≫ Enterprise Linux Server Eus Version 7.5

Redhat ≫ Enterprise Linux Server Eus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.7

Redhat ≫ Enterprise Linux Server Tus Version 7.3

Redhat ≫ Enterprise Linux Server Tus Version 7.6

Redhat ≫ Enterprise Linux Server Tus Version 7.7

Redhat ≫ Enterprise Linux Workstation Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	12.28%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Third Party Advisory

http://www.debian.org/security/2015/dsa-3388

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2583.html

Third Party Advisory

https://security.gentoo.org/glsa/201607-15

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1033951

Third Party Advisory

VDB Entry

https://security.netapp.com/advisory/ntap-20171004-0001/

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0780.html

Third Party Advisory

http://support.ntp.org/bin/view/Main/NtpBug2919

Patch

Vendor Advisory

http://www.securityfocus.com/bid/77288

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-7852

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-7852

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-7852

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-7852